$ rpki-client -vvf repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft File: F71ADE61635D40E729AD7D386CF8F90E391AB884.mft (raw, json) Hash identifier: K+C1yI6Vd6ply+82hT33f9LncmIKsuTQXsuzXxMGv0k= Subject key identifier: 30:74:C0:AF:E6:71:EE:8A:D3:7A:0D:12:70:CA:D9:AF:E0:A8:BD:EE Authority key identifier: F7:1A:DE:61:63:5D:40:E7:29:AD:7D:38:6C:F8:F9:0E:39:1A:B8:84 Certificate issuer: /CN=F71ADE61635D40E729AD7D386CF8F90E391AB884 Certificate serial: 307E63C4F6FEF77CB0A9833FA44D64DAB5367B42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft Manifest number: 0204 Signing time: Tue 24 Mar 2026 15:41:01 +0000 Manifest this update: Tue 24 Mar 2026 15:36:00 +0000 Manifest next update: Fri 27 Mar 2026 18:59:00 +0000 Files and hashes: 1: F71ADE61635D40E729AD7D386CF8F90E391AB884.crl (hash: sB7UzrQjbblDpeHP2Z0prEMwP2gR7dMdM3OpWIKxYqQ=) 2: 3130332e3134372e3231312e302f32342d3234203d3e20313530353434.roa (hash: 5CmAHoxqMaeNE699lYg+ydVRs8BbrTW2xLv4KFQbvVM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.crl rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:7e:63:c4:f6:fe:f7:7c:b0:a9:83:3f:a4:4d:64:da:b5:36:7b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71ADE61635D40E729AD7D386CF8F90E391AB884 Validity Not Before: Mar 24 15:36:00 2026 GMT Not After : Mar 27 18:59:00 2026 GMT Subject: CN=3074C0AFE671EE8AD37A0D1270CAD9AFE0A8BDEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2f:47:60:5d:94:c6:6b:60:cb:93:a0:8d:d3: 3c:31:2f:71:76:7c:cc:94:c5:c2:7e:6c:eb:56:c6: ee:b6:79:02:3c:7c:b5:6b:ca:74:15:c9:8c:2d:93: dc:59:01:9e:ed:e3:19:ac:95:9d:9b:ab:72:ea:f6: 0b:70:b2:83:70:cc:00:85:f1:83:4b:72:e8:9e:c7: 54:ac:89:59:99:94:69:8e:a9:fc:c8:57:57:42:39: f8:de:29:aa:70:df:b8:46:b4:45:e9:4d:ec:91:b3: 06:57:3e:44:01:22:43:e1:51:31:2c:fc:36:ef:f1: 6b:4f:7b:09:c9:c6:68:47:79:21:0a:57:e4:95:91: 72:6e:c6:e8:1c:4c:b4:2d:9e:fd:f9:d4:9e:6e:14: ca:04:7c:a9:dc:64:28:84:ba:9e:2c:50:89:29:7c: e4:1d:bc:39:f6:39:b6:04:cb:ed:32:85:ac:6d:19: f4:69:57:cc:b6:9b:8e:8d:66:d9:c1:b2:7c:f4:d3: dd:7f:d9:69:32:99:55:82:cc:6f:e8:8a:2f:c4:25: 5c:89:36:f5:ef:01:c8:b2:e8:5c:17:86:bd:28:77: ae:ce:18:79:0a:86:e5:61:4b:01:db:22:5d:37:e2: cd:1c:60:29:62:d5:48:63:e2:45:ca:94:d0:1d:20: 03:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:74:C0:AF:E6:71:EE:8A:D3:7A:0D:12:70:CA:D9:AF:E0:A8:BD:EE X509v3 Authority Key Identifier: keyid:F7:1A:DE:61:63:5D:40:E7:29:AD:7D:38:6C:F8:F9:0E:39:1A:B8:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:43:02:3a:64:bb:9a:02:cb:29:58:b5:9f:1b:87:1a:c3:fa: c6:e2:51:fe:79:4e:f7:76:28:b1:76:cc:c7:81:7d:a4:26:b4: 1d:98:82:d4:e9:89:d1:3d:35:22:e3:06:18:c6:df:52:d5:60: c6:2b:75:e9:f8:61:fc:d9:d5:28:36:6e:df:61:54:51:a6:7f: 5b:aa:25:1d:33:17:32:74:68:7c:d1:f8:dd:c8:b6:e0:91:be: ab:92:1a:a5:a7:bb:c2:24:18:50:53:3b:e9:cb:d5:bb:ae:44: c1:ec:62:9b:85:ab:4c:d0:93:36:ef:1a:c1:b2:73:fe:65:7e: 18:af:1c:f6:db:61:94:00:4b:65:1b:01:0b:f3:2d:ab:69:6c: 76:b4:20:94:e8:cc:0d:19:e8:2c:2a:a8:58:c1:d6:65:37:45: 85:12:35:9c:af:f7:b5:81:94:1e:5d:e4:cb:b5:44:ee:79:30: 8a:83:d6:8c:73:3a:bf:e5:f7:01:69:02:7a:92:c9:a9:c5:d4: 4f:ef:5d:ad:41:5b:f1:ed:fb:a0:7f:dd:36:fc:a2:9d:70:7a: 08:1e:f7:75:1a:be:17:53:c6:68:d4:a7:a3:f9:43:d3:49:be: 0d:b9:7a:f0:be:9d:5f:86:9d:6a:f7:67:4d:26:2c:f1:5e:ba: 4e:03:6e:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMH5jxPb+93ywqYM/pE1k2rU2e0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5MEUz OTFBQjg4NDAeFw0yNjAzMjQxNTM2MDBaFw0yNjAzMjcxODU5MDBaMDMxMTAvBgNV BAMTKDMwNzRDMEFGRTY3MUVFOEFEMzdBMEQxMjcwQ0FEOUFGRTBBOEJERUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoL0dgXZTGa2DLk6CN0zwxL3F2 fMyUxcJ+bOtWxu62eQI8fLVrynQVyYwtk9xZAZ7t4xmslZ2bq3Lq9gtwsoNwzACF 8YNLcuiex1SsiVmZlGmOqfzIV1dCOfjeKapw37hGtEXpTeyRswZXPkQBIkPhUTEs /Dbv8WtPewnJxmhHeSEKV+SVkXJuxugcTLQtnv351J5uFMoEfKncZCiEup4sUIkp fOQdvDn2ObYEy+0yhaxtGfRpV8y2m46NZtnBsnz0091/2WkymVWCzG/oii/EJVyJ NvXvAciy6FwXhr0od67OGHkKhuVhSwHbIl034s0cYCli1Uhj4kXKlNAdIAO/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMHTAr+Zx7orTeg0ScMrZr+Cove4wHwYDVR0j BBgwFoAU9xreYWNdQOcprX04bPj5DjkauIQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjBhMmJlYy1mODFhLTRhM2ItYTE0NC0xNzViMTY4ZTIyZmQvMC9GNzFBREU2MTYz NUQ0MEU3MjlBRDdEMzg2Q0Y4RjkwRTM5MUFCODg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5MEUzOTFB Qjg4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWYwYTJiZWMtZjgxYS00YTNiLWEx NDQtMTc1YjE2OGUyMmZkLzAvRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5 MEUzOTFBQjg4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANVDAjpku5oCyylYtZ8bhxrD+sbiUf55Tvd2 KLF2zMeBfaQmtB2YgtTpidE9NSLjBhjG31LVYMYrden4YfzZ1Sg2bt9hVFGmf1uq JR0zFzJ0aHzR+N3ItuCRvquSGqWnu8IkGFBTO+nL1buuRMHsYpuFq0zQkzbvGsGy c/5lfhivHPbbYZQAS2UbAQvzLatpbHa0IJTozA0Z6CwqqFjB1mU3RYUSNZyv97WB lB5d5Mu1RO55MIqD1oxzOr/l9wFpAnqSyanF1E/vXa1BW/Ht+6B/3Tb8op1wegge 93UavhdTxmjUp6P5Q9NJvg25evC+nV+GnWr3Z00mLPFeuk4DbiQ= -----END CERTIFICATE-----Generated at Thu Mar 26 19:33:11 2026 by rpki-client